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International Bureau (PCT Rule 17.2(a)). 
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Paper No./Mail Date . 
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EXAMINER'S AMENDMENT 

1 . An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1.312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with Attorney Sean ZHang on 1 1/29/06. 

The application has been amended as follows: 



Claim 1 (Currently Amended). A method of authenticating a pair of correspondents 
A,B in a data communication system to permit exchange of information therebetween 
over a communication link , each of said correspondents having a respective private key 
a,b and a public key p A> Pb derived from a generator a and respective ones of said 
private keys a,b, said method including the steps of 

i) a first of said correspondents A selecting a first random integer x and 
exponentiating a function f(a) including said generator to a power g(x) to provide a 
first exponentiated function f(a) 9(x) ; 

ii) said first correspondent A forwarding to a second correspondent B a 
message 

including said first exponentiated function f(a) 9(x) ; 

iii) said correspondent B selecting a second random integer y and 
exponentiating a function f(a) including said generator to a power g(y) to provide a 
second 

exponentiated function f(a) 9(y) ; 
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iv) said second correspondent B constructing a session key K from 
information 

made public by said first correspondent A and information that is private to said 
second correspondent B, said session key K also being constructible by said first 
correspondent A from information made public by B and information that is private to 
said first correspondent A; 

v) said second correspondent B generating a value h of a function F[5,K] 
where F[d,K] denotes a cryptographic function applied conjointly to 6 and K and 
where 6 is a subset of the public information provided by B thereby to bind the values 
of d and K; 

vi) said second correspondent B forwarding a message to said first 
correspondent A including said second exponential function f(a) 9(y) and said value h 
of said cryptographic function F[6,K]; 

vii) said first correspondent receiving said message and computing a session 

key 

K* from information made public by said second correspondent B and private to said 
first correspondent A; 

viii) said first correspondent A computing a value h' of a cryptographic function 
F[d,K'];a*4 

ix) comparing said values obtained from said cryptographic functions F to 
confirm their correspondencefr.11 : and 

x) upon such confirmation, permitting further exchange of information over said 
communication link. 

Claim 1 1 (Currently Amended). A method of transporting a key between a pair of 
correspondents A,B in a data communication system to permit exchange of information 
therebetween over a communication link , each of said correspondents having a 
respective private key a,b and a public p A , Pb derived from a generator a and respective 
ones of said private keys a,b, said method including the steps of 
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i) a first of said correspondents A selecting a first random integer x and 
exponentiating a function f(a) including said generator to a power g(x) to provide a 
first exponentiated function f(a) 9(x) . 

ii) said first correspondent A forwarding to a second correspondent B a 
message including said first exponentiated function f(a) 9(x) ; 

iii) said second correspondent B constructing a session key K from 
information 

made public by said first correspondent A and information that is private to said 
second correspondent B, said session key K also being constructible by said first 
correspondent A from information made public by B and information that is private to 
said first correspondent A; 

iv) both of said first correspondent A and said second correspondent B 
computing a respective value h,h' of function F[d,K] where F[d,K] denotes a 
cryptographic function applied to 6 and K and where d is a subset of the public 
information provided by one of said correspondents; 

v) at least one of said correspondents comparing said values h,h' obtained 

from 

said cryptographic function F to confirm their correspondence^.]! ; and 

vi) upon such confirmation, permitting further exchange of information over 
said communication link. 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Linh LD Son whose telephone number is 571-272-3856. 
The examiner can normally be reached on 9-6 (M-F). 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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Examiner 
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